Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: AfW2nGatBGZEe/Etasc6+Gmeb0pp+VQP1IKxM/DK8P8=
Subject key identifier: ED:CA:E2:35:BB:25:F6:49:B8:49:C8:61:0F:01:48:82:5A:B0:AE:19
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 01A0D796C8E1521883735354E5D2D014AC19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1A6D
Signing time: Fri 25 Sep 2026 08:02:58 +0000
Manifest this update: Fri 25 Sep 2026 08:02:58 +0000
Manifest next update: Sat 26 Sep 2026 08:02:58 +0000
Files and hashes: 1: 1-NYp-ANDJGWn2zBa6tZxxYGdDfA.roa (hash: ACBt4zT2KY2CKqY2w+FWy0192eghSargg1ySIXwb63Y=)
2: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: qFjvNrc6IGjZ7LBlZ6Ev6qjzMOiDnJV0su30+Yu7CFw=)
3: gGTUtih5jVa-QbWTlOxD1xFHxEM.roa (hash: V1056kAulKAWgU4sgdguF4s6mRxgfRsvQzLGzFRcugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:c8:e1:52:18:83:73:53:54:e5:d2:d0:14:ac:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Sep 25 08:02:58 2026 GMT
Not After : Sep 26 08:02:58 2026 GMT
Subject: CN=edcae235bb25f649b849c8610f0148825ab0ae19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:a4:50:20:bc:7c:79:1b:6c:7b:a1:5d:60:
a7:86:65:7d:dc:f2:b6:fb:69:68:6b:eb:f5:5d:74:
6e:37:76:a5:9f:ad:1b:39:52:80:a8:59:98:53:dd:
be:ff:ec:f4:0b:e4:86:05:17:54:26:18:54:01:c8:
0d:d3:3a:0a:0c:36:08:b9:34:81:4c:d4:7f:9f:7c:
0b:36:54:e9:df:b1:45:52:a7:cb:40:ae:45:4e:66:
22:a6:bf:15:8c:f9:aa:77:09:a6:fe:98:91:87:62:
1b:6c:01:36:d5:16:01:c4:d8:70:72:fd:5e:d3:e8:
4a:e9:4c:b8:ad:27:19:7c:7f:36:bf:9c:63:ea:1b:
67:79:fd:43:f6:76:d2:7c:b1:ca:a4:4f:7d:32:49:
a6:30:df:db:da:3d:6c:be:f7:56:3f:34:58:ef:a5:
bc:02:cb:70:cb:ec:27:55:cb:04:58:58:74:f4:bf:
a4:75:d5:3d:4c:52:a2:8c:c2:4f:aa:e9:ff:2b:2b:
94:f6:32:d9:12:a9:ae:e4:c0:a0:25:76:ff:92:ac:
04:9e:82:25:37:c9:2e:c9:86:f9:ab:f6:be:0f:fb:
3a:26:53:aa:75:f0:48:4d:ab:88:9c:05:7b:68:e9:
c1:08:62:1f:b9:8c:75:62:0d:2a:39:a8:2f:de:c6:
71:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CA:E2:35:BB:25:F6:49:B8:49:C8:61:0F:01:48:82:5A:B0:AE:19
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:2e:31:50:38:ba:93:ef:47:86:db:f0:0e:ff:b0:51:7b:b0:
c7:41:44:5e:78:e9:6c:d3:99:17:36:e8:41:4c:79:7f:ff:e5:
b2:90:65:80:ae:8d:38:c0:7f:e8:1b:9d:56:85:30:49:1a:a8:
fd:00:b8:ba:2a:f7:00:67:3f:63:fb:99:ef:49:d6:74:bb:25:
14:1c:19:95:74:ab:7c:ad:9a:36:05:23:8b:09:93:93:4c:b6:
da:ed:59:98:10:d8:55:a8:4e:3c:e8:6f:10:f5:6c:fd:dd:54:
43:dd:8d:b2:aa:0d:f3:06:81:61:16:25:71:1e:be:cd:58:52:
e0:ec:61:1a:94:04:98:9c:09:d2:55:37:fb:10:ed:7d:eb:10:
41:7e:3a:e3:3a:f6:41:1c:4d:fc:17:2a:79:88:d4:71:37:e7:
24:d2:b1:a1:f5:6a:80:87:fa:16:69:2b:1f:b8:66:f7:1a:96:
60:8f:4b:55:d0:b5:c5:fa:e0:f2:1f:53:33:db:28:43:b1:02:
5c:2c:fa:36:c5:b2:6c:59:1d:33:bf:77:72:89:88:65:75:29:
80:a4:2f:2d:f8:bf:03:93:0b:9f:81:b6:8e:61:92:d5:b1:8f:
38:35:54:a0:46:a5:55:99:18:3a:3e:3c:ff:bc:6b:c2:68:74:
e0:05:e6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXlsjhUhiDc1NU5dLQFKwZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjYwOTI1MDgwMjU4WhcNMjYwOTI2MDgwMjU4WjAzMTEwLwYDVQQD
EyhlZGNhZTIzNWJiMjVmNjQ5Yjg0OWM4NjEwZjAxNDg4MjVhYjBhZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CakUCC8fHkbbHuhXWCnhmV93PK2
+2loa+v1XXRuN3aln60bOVKAqFmYU92+/+z0C+SGBRdUJhhUAcgN0zoKDDYIuTSB
TNR/n3wLNlTp37FFUqfLQK5FTmYipr8VjPmqdwmm/piRh2IbbAE21RYBxNhwcv1e
0+hK6Uy4rScZfH82v5xj6htnef1D9nbSfLHKpE99MkmmMN/b2j1svvdWPzRY76W8
Astwy+wnVcsEWFh09L+kddU9TFKijMJPqun/KyuU9jLZEqmu5MCgJXb/kqwEnoIl
N8kuyYb5q/a+D/s6JlOqdfBITauInAV7aOnBCGIfuYx1Yg0qOagv3sZxBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3K4jW7JfZJuEnIYQ8BSIJasK4ZMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHi4xUDi6
k+9HhtvwDv+wUXuwx0FEXnjpbNOZFzboQUx5f//lspBlgK6NOMB/6BudVoUwSRqo
/QC4uir3AGc/Y/uZ70nWdLslFBwZlXSrfK2aNgUjiwmTk0y22u1ZmBDYVahOPOhv
EPVs/d1UQ92NsqoN8waBYRYlcR6+zVhS4OxhGpQEmJwJ0lU3+xDtfesQQX464zr2
QRxN/BcqeYjUcTfnJNKxofVqgIf6FmkrH7hm9xqWYI9LVdC1xfrg8h9TM9soQ7EC
XCz6NsWybFkdM793comIZXUpgKQvLfi/A5MLn4G2jmGS1bGPODVUoEalVZkYOj48
/7xrwmh04AXmzw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:31:29 2026 by rpki-client